Cyber Threat Intelligence Analyst

Caterpillar Inc.•Nashville, TN

1d•$89,210 - $133,810•Onsite

About The Position

Caterpillar’s Computer Security Incident Response Team (CSIRT) is seeking an experienced Cyber Threat Intelligence (CTI) Analyst. This person is responsible for collecting, analyzing and delivering both tactical and strategic intelligence on threat actors, campaigns, vulnerabilities, emerging risks across enterprise environments. This role involves conducting vulnerability intelligence assessments using CVE analysis, CVSS scoring, and threat modeling to prioritize critical exposures, while producing actionable intelligence products such as threat briefs, reports, and TTP analyses aligned to frameworks like MITRE ATT&CK. The analyst translates complex threat data into clear insights for both technical and non-technical audiences through regular briefings and plays a key role in supporting incident response and cross-functional collaboration, partnering with teams across security domains and external intelligence communities to strengthen overall organizational defense.

Requirements

Relevant experience in cyber threat intelligence, SOC, incident response, threat hunting, vulnerability intelligence, or a closely related cyber defense function.
Working knowledge of the CTI lifecycle and structure analytic methods, including collection, enrichment, analysis, and dissemination for different customers.
Fluency with MITRE ATT&CK and related frameworks such as Kill Chain, Diamon Model, or equivalent threat modeling approaches.
Practical experience with vulnerability intelligence, including interpreting CVEs, CVSS, exploitability context, and prioritization of relevant vulnerabilities.
Ability to analyze adversary TTPs, IOCs, and campaigns and turn that analysis into actionable output for defenders.
Strong written and verbal communication skills
Research and documentation experience.

Nice To Haves

Knowledge of the CTI lifecycle
Familiarity with MITRE ATT&CK Framework
Understanding of CISA KEV / vulnerability prioritization concepts
Experience curating threat briefings and written reporting.
Ability to analyze TTPs, IOCs, campaigns, CVEs, and threat trends.
Strong research, requirements analysis, and technical writing skills
Knowledge of AI tools, scripting, or automation
Familiarity with CI/CD pipelines, application security, or product security concepts
Familiarity with OT/ICS security
Experience with intelligence-sharing communities or external partner collaboration

Responsibilities

Conduct tactical and strategic cyber threat intelligence collection, analysis, and reporting focused on threat actors, campaigns, vulnerabilities, zero-days, and organizational exposure across enterprise environments.
Perform vulnerability intelligence assessments using CVE analysis, CVSS scoring, threat modeling, and prioritization frameworks to identify and track emerging threats and materially relevant exposures.
Produce and disseminate actional intelligence products including threat briefs, threat reports, TTP analysis, and recommendations mapped to MITRE ATT&CK and other industry-standard frameworks to support SOC, CSIRT, and threat hunting teams.
Deliver recuring threat intelligence briefings – including monthly strategic updates and more frequent tactical briefings – to both technical and non-technical audiences, translating complex threats into clear, actionable insights.
Support intelligence-driven incident response and cross-functional collaboration, including investigation of security incidents/data breaches and partnership with groups such as OT/ICS, product security, application security, and external intelligence-sharing partners.